A vulnerability in the NuPoint Messenger (NPM) component of Mitel MiCollab through version 9.8 SP1 (9.8.1.5) could allow an authenticated attacker with administrative privilege to conduct a privilege escalation attack due to the execution of a resource with unnecessary privileges. A successful exploit could allow an attacker to execute arbitrary commands with elevated privileges.
References
| Link | Resource |
|---|---|
| https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-24-0023 | Vendor Advisory |
Configurations
History
07 Jul 2025, 17:55
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-24-0023 - Vendor Advisory | |
| First Time |
Mitel
Mitel micollab |
|
| CPE | cpe:2.3:a:mitel:micollab:*:*:*:*:*:*:*:* |
Information
Published : 2024-10-21 21:15
Updated : 2025-07-07 17:55
NVD link : CVE-2024-35287
Mitre link : CVE-2024-35287
CVE.ORG link : CVE-2024-35287
JSON object : View
Products Affected
mitel
- micollab
CWE
CWE-276
Incorrect Default Permissions